This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/Kft9o7ROQbMjaeSlx5DTCB_Gmqk.cer File: Kft9o7ROQbMjaeSlx5DTCB_Gmqk.cer (raw, json) Hash identifier: 8NX/S0drJxiCtnR/vPDpKhEHicBNI0nmi0occ1zHTR0= Subject key identifier: 29:FB:7D:A3:B4:4E:41:B3:23:69:E4:A5:C7:90:D3:08:1F:C6:9A:A9 Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669 Certificate serial: 019B7F83EEB506CC108F6BB24047074ED020 Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Manifest: rsync://rpki.ripe.net/repository/DEFAULT/ec/17a016-26c7-424c-862f-bcac8b552a9a/1/Kft9o7ROQbMjaeSlx5DTCB_Gmqk.mft caRepository: rsync://rpki.ripe.net/repository/DEFAULT/ec/17a016-26c7-424c-862f-bcac8b552a9a/1/ Notify URL: https://rrdp.ripe.net/notification.xml Certificate not before: Fri 02 Jan 2026 16:21:51 +0000 Certificate not after: Thu 01 Jul 2027 00:00:00 +0000 Subordinate resources: AS: 15512 AS: 16019 AS: 29113 IP: 31.30.0.0/16 IP: 31.169.128.0/17 IP: 46.135.0.0/16 IP: 46.167.192.0/18 IP: 62.24.64.0/19 IP: 62.240.160.0/19 IP: 62.245.64.0/18 IP: 77.48.0.0/16 IP: 78.44.0.0/15 IP: 78.102.0.0/16 IP: 80.95.96.0/19 IP: 81.27.192.0/20 IP: 82.142.64.0/18 IP: 84.42.128.0/17 IP: 84.242.64.0/18 IP: 86.49.0.0/16 IP: 88.146.128.0/17 IP: 89.102.0.0/15 IP: 89.176.0.0/15 IP: 93.90.160.0/20 IP: 93.99.0.0/16 IP: 94.112.0.0/15 IP: 109.107.192.0/19 IP: 141.170.128.0/18 IP: 178.77.192.0/18 IP: 185.188.184.0/22 IP: 188.95.120.0/21 IP: 213.192.0.0/18 IP: 213.220.192.0/18 IP: 217.77.160.0/20 IP: 2a00:11b0::/29 IP: 2a01:5e0::/32 IP: 2a02:8300::/28 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 13:21:19 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7f:83:ee:b5:06:cc:10:8f:6b:b2:40:47:07:4e:d0:20 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669 Validity Not Before: Jan 2 16:21:51 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=29fb7da3b44e41b32369e4a5c790d3081fc69aa9 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ad:f2:60:80:f3:06:de:88:d7:b7:5b:cf:ed:ef: b8:af:e9:14:c8:d8:ff:40:f6:61:31:d3:f9:72:56: fa:27:18:74:01:36:0e:0e:aa:9c:b0:66:8a:b0:e3: f4:13:de:1f:02:f6:27:48:4b:94:87:5a:40:0e:75: 76:89:59:c4:f9:dc:b6:ba:87:d7:60:69:73:c2:e6: 70:88:7c:b9:7d:12:0b:cd:e8:f3:1b:5f:b5:25:de: cc:42:c4:92:6b:94:a8:22:cd:0c:18:34:fc:d2:71: 00:65:08:b3:df:4f:6e:d5:5d:5e:f2:b8:8e:ad:84: b6:b4:d4:98:ed:88:98:c1:f1:4b:9a:f6:28:c5:33: b2:98:02:31:f4:e6:5a:5b:05:a4:e7:94:71:aa:35: fb:5f:eb:f3:cf:d6:4e:6b:d8:e8:d7:6d:52:2c:0f: f7:e3:91:97:b1:b6:f6:a2:d2:ce:a2:39:6c:3d:47: f0:a0:40:03:71:c1:2b:a0:3c:2b:93:d5:94:72:12: c3:83:06:cc:6e:65:bb:78:ad:25:b4:c0:d6:27:ff: d0:68:f8:3d:1a:8d:d5:d0:df:4e:c3:af:f5:e2:dc: c1:94:26:7b:0b:c0:7c:5d:cc:5c:1e:ea:25:a7:43: 81:83:21:47:e0:f6:be:46:c7:36:4d:b8:5a:c7:79: 14:47 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 29:FB:7D:A3:B4:4E:41:B3:23:69:E4:A5:C7:90:D3:08:1F:C6:9A:A9 X509v3 Authority Key Identifier: keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 X509v3 Basic Constraints: critical CA:TRUE X509v3 Key Usage: critical Certificate Sign, CRL Sign Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Subject Information Access: CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/ec/17a016-26c7-424c-862f-bcac8b552a9a/1/ RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/ec/17a016-26c7-424c-862f-bcac8b552a9a/1/Kft9o7ROQbMjaeSlx5DTCB_Gmqk.mft RPKI Notify - URI:https://rrdp.ripe.net/notification.xml X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 31.30.0.0/16 31.169.128.0/17 46.135.0.0/16 46.167.192.0/18 62.24.64.0/19 62.240.160.0/19 62.245.64.0/18 77.48.0.0/16 78.44.0.0/15 78.102.0.0/16 80.95.96.0/19 81.27.192.0/20 82.142.64.0/18 84.42.128.0/17 84.242.64.0/18 86.49.0.0/16 88.146.128.0/17 89.102.0.0/15 89.176.0.0/15 93.90.160.0/20 93.99.0.0/16 94.112.0.0/15 109.107.192.0/19 141.170.128.0/18 178.77.192.0/18 185.188.184.0/22 188.95.120.0/21 213.192.0.0/18 213.220.192.0/18 217.77.160.0/20 IPv6: 2a00:11b0::/29 2a01:5e0::/32 2a02:8300::/28 sbgp-autonomousSysNum: critical Autonomous System Numbers: 15512 16019 29113 Signature Algorithm: sha256WithRSAEncryption 0e:e1:9f:96:62:1c:46:bc:c9:35:76:52:12:b0:e3:88:00:90: f6:31:ad:ae:c6:d4:cb:75:ce:03:58:8a:1d:a4:04:95:ba:04: 73:92:36:b7:27:a4:b4:06:62:d7:0c:ba:56:ad:f3:ab:2b:78: ac:1f:e2:0f:09:e7:0a:72:11:b3:7f:5e:dc:3e:ba:9d:a8:05: 32:3f:ec:85:5f:f1:97:0e:c2:22:bc:56:67:7b:9d:6f:29:bc: 92:c4:2e:9c:43:d5:8f:5e:d3:60:a6:eb:fa:52:bb:40:1c:8b: 95:34:bd:1d:19:af:8a:53:13:3a:f5:4d:36:30:d4:64:8b:4e: 3e:67:2d:b7:64:37:9e:d3:43:8c:42:b1:49:5e:b2:8f:f3:64: 27:44:b7:91:b8:45:7f:e4:2c:4a:0a:cc:79:27:9d:d2:71:91: 93:09:13:44:b0:34:48:78:3e:09:e9:70:c8:86:4c:55:6c:16: 98:6e:f3:ba:ab:50:34:90:09:11:ae:89:c2:5e:e5:12:ec:bc: 30:f1:28:af:8a:de:6a:18:6e:c4:ac:46:50:8b:96:51:46:ad: 24:84:dd:b6:95:ad:df:6d:67:ee:db:f4:5b:45:3f:cd:b4:a9: b8:61:fe:07:59:ab:bf:7b:14:b1:1c:f3:86:b2:0a:4b:04:51: 04:a2:3c:13 -----BEGIN CERTIFICATE----- MIIGYTCCBUmgAwIBAgISAZt/g+61BswQj2uyQEcHTtAgMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDJhOTRhOGRkNTU0YWU3MDEwNzIwOTljNzBiNjQwNzU1NWRk ZGU2NjkwHhcNMjYwMTAyMTYyMTUxWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EygyOWZiN2RhM2I0NGU0MWIzMjM2OWU0YTVjNzkwZDMwODFmYzY5YWE5MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEArfJggPMG3ojXt1vP7e+4r+kUyNj/ QPZhMdP5clb6Jxh0ATYODqqcsGaKsOP0E94fAvYnSEuUh1pADnV2iVnE+dy2uofX YGlzwuZwiHy5fRILzejzG1+1Jd7MQsSSa5SoIs0MGDT80nEAZQiz309u1V1e8riO rYS2tNSY7YiYwfFLmvYoxTOymAIx9OZaWwWk55RxqjX7X+vzz9ZOa9jo121SLA/3 45GXsbb2otLOojlsPUfwoEADccEroDwrk9WUchLDgwbMbmW7eK0ltMDWJ//QaPg9 Go3V0N9Ow6/14tzBlCZ7C8B8XcxcHuolp0OBgyFH4Pa+Rsc2Tbhax3kURwIDAQAB o4IDbTCCA2kwHQYDVR0OBBYEFCn7faO0TkGzI2nkpceQ0wgfxpqpMB8GA1UdIwQY MBaAFCqUqN1VSucBByCZxwtkB1Vd3eZpMA8GA1UdEwEB/wQFMAMBAf8wDgYDVR0P AQH/BAQDAgEGMGAGCCsGAQUFBwEBBFQwUjBQBggrBgEFBQcwAoZEcnN5bmM6Ly9y cGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvYWNhL0twU28zVlZLNXdFSElKbkhDMlFI VlYzZDVtay5jZXIwggEjBggrBgEFBQcBCwSCARUwggERMF0GCCsGAQUFBzAFhlFy c3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxUL2VjLzE3YTAx Ni0yNmM3LTQyNGMtODYyZi1iY2FjOGI1NTJhOWEvMS8wfAYIKwYBBQUHMAqGcHJz eW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvZWMvMTdhMDE2 LTI2YzctNDI0Yy04NjJmLWJjYWM4YjU1MmE5YS8xL0tmdDlvN1JPUWJNamFlU2x4 NURUQ0JfR21xay5tZnQwMgYIKwYBBQUHMA2GJmh0dHBzOi8vcnJkcC5yaXBlLm5l dC9ub3RpZmljYXRpb24ueG1sMFkGA1UdHwRSMFAwTqBMoEqGSHJzeW5jOi8vcnBr aS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvS3BTbzNWVks1d0VISUpuSEMy UUhWVjNkNW1rLmNybDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMIHkBggrBgEF BQcBBwEB/wSB1DCB0TCBsQQCAAEwgaoDAwAfHgMEBx+pgAMDAC6HAwQGLqfAAwQF PhhAAwQFPvCgAwQGPvVAAwMATTADAwFOLAMDAE5mAwQFUF9gAwQEURvAAwQGUo5A AwQHVCqAAwQGVPJAAwMAVjEDBAdYkoADAwFZZgMDAVmwAwQEXVqgAwMAXWMDAwFe cAMEBW1rwAMEBo2qgAMEBrJNwAMEArm8uAMEA7xfeAMEBtXAAAMEBtXcwAMEBNlN oDAbBAIAAjAVAwUDKgARsAMFACoBBeADBQQqAoMAMCEGCCsGAQUFBwEIAQH/BBIw EKAOMAwCAjyYAgI+kwICcbkwDQYJKoZIhvcNAQELBQADggEBAA7hn5ZiHEa8yTV2 UhKw44gAkPYxra7G1Mt1zgNYih2kBJW6BHOSNrcnpLQGYtcMulat86sreKwf4g8J 5wpyEbN/Xtw+up2oBTI/7IVf8ZcOwiK8Vmd7nW8pvJLELpxD1Y9e02Cm6/pSu0Ac i5U0vR0Zr4pTEzr1TTYw1GSLTj5nLbdkN57TQ4xCsUleso/zZCdEt5G4RX/kLEoK zHknndJxkZMJE0SwNEh4PgnpcMiGTFVsFphu87qrUDSQCRGuicJe5RLsvDDxKK+K 3moYbsSsRlCLllFGrSSE3baVrd9tZ+7b9FtFP820qbhh/gdZq797FLEc84ayCksE UQSiPBM= -----END CERTIFICATE-----Generated at Sun Jan 25 22:33:02 2026 by rpki-client